
What is claimed is: 
1 . A method foi 
comprising: 

determining i 



use in a device coupled to a communications channel, 



processing, in 
communications channel, the 



The method o; 



security service to perform with a data block; 
generating sedurity information to pass along with the data block, the 
security information identify ng the security service; and 

a controller adapted to control communication with the 
data block according to the security information. 



claim 1, wherein the processing includes performing 



cryptographic processing of the data block 



processing. 



The method of ilaim 1, further comprising: 

receiving the data block from a software routine; and 

routing the processed data block back to the software routine after 



The method of claim 1, further comprising: 



determining if the 



security service can be performed by the controller; and 



if not, processing jhe data block according to the security service in a 



software routine instead of the controller 



5. The method of claim 1, further comprising identifying a security service 
according to an Internet Protocol security protocol. 
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the data; and 



routine. 



6. A method for i ise in a device including a controller adapted to control 
communication with a transport medium, comprising: 

Tom a routine in the device; 



receiving data 

sending the data to the controller to perform cryptographic processing of 



after cryptogra] )hic processing, transmitting the processed data back to the 



7. The method of claim 6, further comprising sending the processed data to 
the controller at least one more time to perform further cryptographic processing. 



8. A method for use 
communication with a transpoijt 

receiving data fijom 
determining frofci 



9. The method 
processing is performed by a 



in a device including a controller adapted to control 
medium, comprising: 

the transport medium; 
a portion of the data if cryptographic processing of the 



data is to be employed; and 

performing, in tjie controller, the cryptographic processing of the data. 



of Qlaim 8, wherein the performing of the cryptographic 
cryptographic engine in the controller. 



1 0. The method of < ;laim 8, further comprising: 

determining if the cryptographic processing can be performed by the 

controller; and 

performing the cryptographic processing in a software routine instead if 
the controller is unable to perform the cryptographic processing. 
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11. An article inclu ding a machine-readable storage medium containing 
instructions for execution in a system including a controller adapted to control 
communications with a communications channel, the instructions when executed causing 
the system to: 

identify a secuiity service to be performed on data to be transmitted over 
md 

prepare security control information to pass along with the data to the 
controller to perform processi ig according to the identified security service. 



the communications channel; 



12. The article 
when executed further causes 
identified security service i 
performed by the controller. 



of 4laim 1 1, the storage medium containing instructions that 

the system to perform processing according to the 
instead of the controller if the security service cannot be 



13. An article including a machine-readable storage medium containing 
instructions for execution in a| system including a controller adapted to control 
communications with a communications channel, the instructions when executed causing 
the system to: 

receive a data tjlock from the controller; 

information in the data block if a security service has been 
/ the controller; and 
process the data, block if the security service has not been performed on 
the data block by the controlle *. 



determine from 
performed on the data block b 



14. The article of c 
when executed causes the 
block and send the data block 
security service. 



15. 



The article of c 



aim 13, the storage medium containing instructions that 
systbm to retrieve security information associated with the data 
ind security information to the controller to perform the 



urn 13, the storage medium containing instructions that 



when executed causes the system to perform the security service on the data block. 
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16. A controller for controlling communications with a transport medium, the 
controller comprising: 

a receiving circuit to/receive data and associated security control 
information; and 

a cryptographic engine to cryptographically process the data based on the 
security control information. 

17. The controller oflclaim 16, further comprising a storage device containing 
information identifying security services to be performed, the received security control 
information selecting a portion of the security services information in the storage device, 
wherein the cryptographic engine processes the data according to the selected portion of 
the security services information. 

18. The controller of claim 17, further comprising a device adapted to change 
the contents of the storage /device to update the security services information. 

19. The controller of claim 18, wherein the device is adapted to update the 
security services information based on a predetermined replacement policy. 

20. The controller of claim 17, wherein the security services information 
includes security association information. 

21. A device coupled to a communications channel, comprising: 
an entiiy capable of generating data for transmission to the 

communications channel; and 

a controller adapted to control communication between the entity and the 
communications channel, the controller including an engine to modify the data according 
to a security protocJl before transmitting the data to the communications channel. 



22. The device of claim 2 1 , wherein the engine is adapted to perform 
cryptographic processing. 
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1 23 . The device of cljaim 2 1 , wherein the controller includes a network 

2 controller. 



lim 21, wherein the entity includes an application process. 

lim 21, further comprising a routine adapted to generate 
tion used by the engine to modify the data according to 



1 24. The device of c 

1 25. The device of c 

2 predetermined security inform; 

3 the security protocol. 

1 26. The device of claim 2 1 , wherein the controller includes a receiving circuit 

2 to receive data from the comir unications channel and security data to identify if the 

3 received data is subject to cryptographic processing. 



1 27. The device of o 

2 cryptographic engine to perfofm 



aim 26, wherein the controller further includes a 
the cryptographic processing on the received data. 



v 
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